Firewall Wizards: RE: PIX -> ISA -> OWA Configuration

["Sanford Reed" <sanford.reed () cox net>]

Per MS (Using Microsoft Exchange 2000 Front-End Servers.pdf - available from
MS TechNet) it is configuration 1).

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of Jason Gomes
Sent: Sunday, May 01, 2005 2:14 AM
To: firewall-wizards () honor icsalabs com
Subject: [fw-wiz] PIX -> ISA -> OWA Configuration

What is the preferred placement for a OWA front-end server given these 
two possible network configurations and why?

1) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [PIX Firewall] 
<==> [OWA] <==> [Internal Net w/Exchange Svr]

2) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [OWA] <==> [PIX 
Firewall] <==> [Internal Net w/Exchange Svr]

Notes:
The ISA server is performing a reverse proxy for HTTPS connections.
In #1, the backend firewall will only allow port 443 through to OWA.
In #2, all ports required for OWA to communicate with the internal 
exchange server is allowed.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards